Pseudocode, but imagine in step 2 you have something like

getLines(salesorderId)

to generate the form. In step 4 you compare the result of

getLines(request.salesorderId)

and

getSelectedLines(request)